Extracted

• • Target

    ed72af3f8cec6d92951da165bf49201720bda3ecff4329ada9cdc5afe749c07c.exe

  • Size

    64KB

  • MD5

    c83da5efd06774f99195f65257a10b7d

  • SHA1

    e254dca8b7bab663534c501b116fbfa40d7d886e

  • SHA256

    ed72af3f8cec6d92951da165bf49201720bda3ecff4329ada9cdc5afe749c07c

  • SHA512

    8dc8227c9054dedf78aac08e666b7794066d47372779528283776ef7200e962c2c0e62c12a6fec20cd7f5c4a8a124c89544b5b3063d03704eac659605429e170

  • SSDEEP

    1536:O7I80AEelhWV85YA8TSGWT/iOrb6lLBsLnVLdGUHyNwS:II80BeG6NiOrb6lLBsLnVUUHyNwS

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2